**Phantom IT Calls Pose Serious Threat to Executives in Microsoft 365 Data Theft and Extortion Attacks** In a disturbing trend, cyberattackers have started targeting high-ranking executives with fake IT support calls, compromising their sensitive data and extorting them for ransom. This insidious tactic has been observed in attacks on Microsoft 365 users, where attackers exploit … Read more
**Critical Vulnerability in Telerik UI Components Exposes Millions to Remote Code Execution** A devastating security flaw has been discovered in the widely-used Telerik UI components, leaving millions of websites and applications vulnerable to remote code execution (RCE). The bug, known as a “padding oracle” vulnerability, allows attackers to chain it with other vulnerabilities to gain … Read more
A sophisticated malware campaign is making headlines, as a four-stage VBScript chain has been discovered spreading through ScreenConnect clients. The malicious code exploits vulnerabilities in previously unknown areas of the software, leaving many organizations vulnerable to potential breaches. At its core, the attack relies on the use of ScreenConnect, a popular remote desktop management tool … Read more
Cyber attackers have found a sneaky way to exploit cloud security checklists, turning them into effective gateways for data breaches. A new analysis has revealed that identity exposure can be used as a stepping stone to launch active attack paths, rendering even the most robust security protocols useless. According to an investigation by experts in … Read more
A new wave of sophisticated cyber attacks is exploiting a critical vulnerability in the way online identities are managed, leaving millions of users vulnerable to active attack paths. The threat, which has been dubbed “Identity Exposure,” leverages cross-domain privilege escalation to bypass traditional security measures and gain access to sensitive systems. At its core, Identity … Read more
A New Wave of Sophisticated Attacks Targets Executives in Microsoft 365 Data Theft and Extortion Schemes, Exposing a Chilling Reality of Personal and Corporate Compromise. Microsoft 365 users, particularly high-ranking executives, are being targeted by sophisticated attackers who make fake IT calls to gain access to sensitive data. These cunning scammers pose as IT support … Read more
Over a million people’s personal information exposed in Mathspace data breach A devastating data breach has been disclosed by online maths learning platform Mathspace, affecting over 1 million students, staff, and parents across Australia, New Zealand, the United States, and the UK. The attackers exploited a vulnerability in Metabase, an internal reporting system used by … Read more
Cybersecurity firm N-able has issued its fourth hotfix in just five weeks for a critical vulnerability in its popular remote monitoring and management (RMM) platform, N-central. The flaw, which allows attackers to gain unauthenticated access to sensitive data and execute arbitrary code on affected systems, is particularly concerning given the widespread adoption of RMM tools … Read more
A devastating combination of a padding oracle bug and an unauthenticated remote code execution vulnerability in Telerik UI components has been discovered, leaving numerous organizations vulnerable to serious attacks. The severity of this issue is compounded by the fact that it affects not only authenticated users but also those who are not logged in, making … Read more
A sophisticated cyber threat campaign has been uncovered, exploiting a vulnerability in ScreenConnect, a popular remote desktop access tool used by organizations worldwide. The attackers are using a clever four-stage VBScript chain to compromise newly connected hosts, spreading malware and potentially leading to full network breaches. The attack vector relies on an initial infection, which … Read more